This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier: qx1NHE0FhPIW/mAH7d7LXxPtoyZJgS9TSd7yM0OSwv8=
Subject key identifier: 09:47:5B:6F:29:07:0C:FA:6D:21:6D:79:94:2A:B9:E9:D7:E2:97:80
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019C213AE1AC1B4380A16D8DC84DCF546582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number: 1828
Signing time: Tue 03 Feb 2026 02:00:32 +0000
Manifest this update: Tue 03 Feb 2026 02:00:32 +0000
Manifest next update: Wed 04 Feb 2026 02:00:32 +0000
Files and hashes: 1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: I8HA2zE1W76IrGO2y2c1t6HfpPd/hDWSPm6vfx5YxLQ=)
2: DVhhYEUtlGY-o7FWTsaEjCsuSfM.roa (hash: 3BdDvo6VSykP4vfXUdkCcVvQTTeKHnDzmOoaSk9BBMM=)
3: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
4: mhe7ueS03W2XSdgcfakYwSroXsA.roa (hash: ldAOnBa8GgZlBCGXaADvQnAefafOoOly2oTch4zw0Po=)
5: p_6B25_VKSLLKGO8pJavxamR_Zk.roa (hash: dGxJlqoeHwqEbdInIyeGdbnWpjNL9vFVb47ETgyLdAc=)
6: u6zwrz1fIMPIG6Fq4E3yGzATiH0.roa (hash: WU20DcSmscAh/PhHLfFRUUagNsUT2dCDLJJdqOdtdKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:21:3a:e1:ac:1b:43:80:a1:6d:8d:c8:4d:cf:54:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Feb 3 02:00:32 2026 GMT
Not After : Feb 4 02:00:32 2026 GMT
Subject: CN=09475b6f29070cfa6d216d79942ab9e9d7e29780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:10:fe:17:bf:69:1e:f8:1f:cc:a7:e6:d2:21:
eb:ca:be:1c:29:19:8e:1e:fb:63:e3:d2:39:5c:6f:
7b:ea:f4:78:b5:46:50:81:4e:fd:2c:0d:fd:d5:68:
72:ed:a6:da:12:19:e5:7a:09:5b:ff:0f:7c:36:45:
29:59:ba:d0:2f:12:d7:f5:85:9d:d6:af:de:cb:da:
a8:fd:a9:0c:d7:95:99:da:c1:5b:13:0b:9c:5e:bb:
4b:35:b1:28:cb:4d:0c:d5:36:16:9d:fb:1d:ff:3e:
da:62:c8:fc:c2:f7:bf:ef:a3:1b:92:be:ab:88:90:
1e:15:dc:d8:3a:51:96:e8:c9:6d:cc:30:85:0a:b1:
09:b1:f3:9b:fe:e4:26:ba:fd:14:82:b1:64:48:a2:
cf:65:da:c2:8e:63:04:66:2c:d3:75:49:e0:fc:e9:
3c:3c:f4:d8:c4:84:aa:58:be:b5:89:ef:61:8b:0c:
bc:35:81:22:31:62:3e:90:c3:0f:3e:ba:06:ec:80:
f3:5e:e4:3c:e7:7e:72:29:91:fc:1c:1b:d0:81:39:
52:0f:88:10:da:a3:b0:a0:04:79:d6:41:ab:59:a4:
f7:c3:5f:e1:32:12:1e:26:6c:53:18:e6:99:71:09:
65:a2:d5:ce:af:49:34:13:cb:ab:b9:58:14:30:3f:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:5B:6F:29:07:0C:FA:6D:21:6D:79:94:2A:B9:E9:D7:E2:97:80
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f3:fc:1b:92:09:57:0c:4c:bd:c2:dc:9e:29:70:3b:5f:61:
20:4a:3a:8f:d2:c5:17:7b:30:1b:d2:aa:4f:71:a9:d8:5b:22:
21:12:9f:3e:6e:e0:4f:c2:ca:17:4f:4d:f8:50:f4:3b:09:9f:
7c:74:f4:ab:af:73:9a:be:62:1b:58:56:1b:d8:c1:28:bc:15:
06:a1:89:46:a0:64:13:40:aa:79:0f:95:d0:78:91:05:d5:1e:
95:fe:86:89:a0:04:8b:c1:e0:c2:25:98:bc:72:9b:b1:34:ca:
8e:96:ac:1c:0b:3c:82:52:24:9d:d7:4b:ce:c8:6c:87:3a:35:
4f:94:dc:1a:df:df:25:30:0d:89:28:74:ac:b9:3f:7c:22:1d:
b1:7c:c6:45:cd:e8:09:21:5c:c8:36:8f:0b:01:b6:84:64:51:
94:01:74:0d:45:ac:06:b9:69:a0:36:ba:81:1f:b5:b5:73:3b:
49:f8:1f:bd:a1:91:99:41:c2:fb:16:5e:4f:45:23:dd:00:a3:
d0:66:5b:71:bc:64:f3:47:c1:3e:d4:6d:58:c5:3b:7a:01:8b:
82:e8:36:6f:8e:37:be:d0:b8:2a:8a:5c:4b:c4:92:29:a0:7e:
92:9a:31:96:5b:34:68:a2:ed:4a:b7:82:5f:a0:25:ab:38:3f:
dc:f8:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 12:42:15 2026 by rpki-client